Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script Injection.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-23858 Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. … https://www.cve.org/CVERecord?id=CVE-2026-23858
Post summary
Dell Wyse Management Suite versions before 5.5 are vulnerable to an XSS flaw (CVE‑2026‑23858).
CVE-2026-23858 Cross-Site Scripting Vulnerability in Dell Wyse Management Suite Pre-5.5 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-23858
Post summary
A cross‑site scripting vulnerability (CVE‑2026‑23858) has been identified in Dell Wyse Management Suite versions prior to 5.5, with no evidence of exploitation or mitigation details provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | dell | wyse_management_suite | - | - | - |